ferg.rose - Hello - we are looking to embed one...
Hello - we are looking to embed one of our Liveboards into a public facing website that provides a platform overview. We have embedded the full app experience on our platform so the purpose here would be to showcase the feature on the site via a limited embed. I am trying to figure out which auth type to use in this scenario. AuthType.NONE seems like an appropriate option given that this feature would be available to anyone who visits the site, however I am also seeing that it is not recommended for production environments. I have also considered proxying the website with our thoughtspot service account. If someone could advise me on the best approach here that would be super helpful! Thanks
2 Replies
Hi @ferg.rose AuthType.NONE is primarily recommended for development environments and not for production, due to security concerns. Using it in production could expose your ThoughtSpot instance to unauthorized access or misuse, especially if the embed is not tightly scoped or controlled. I would suggest you to go with Cookiless Authentication.
Thanks for the reply @Aditya - all good then we will do that